Analysis
-
max time kernel
156s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
20-11-2022 14:48
General
-
Target
4bf48438dfaf02c70f065dd4286067d1d3a8f8f8a06a624ce4ad123bc11fafad.exe
-
Size
176KB
-
MD5
592155124c9d85c8d63f6014c1021730
-
SHA1
a811b85eedc96730439871b2e64ea1888c77e1c7
-
SHA256
4bf48438dfaf02c70f065dd4286067d1d3a8f8f8a06a624ce4ad123bc11fafad
-
SHA512
2864bfa326a3079c9c3d766adea9bb6b9fb4496c7eb073e9e4e07afbefb9b9911ce323d80985d7256511fcac5c0f5320866b4f78cfa65af44b170e15320293b4
-
SSDEEP
3072:hUbgQRtqu9uHsDuhruuoIuuySIuZ4ym9899rNOVB6Q5yAQz9+gYDhVss5QFF0bRP:hUkQRt+4yN9QVB6QMwthXi01w0B
Score
3/10
Malware Config
Signatures
-
Program crash 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious behavior: RenamesItself 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4bf48438dfaf02c70f065dd4286067d1d3a8f8f8a06a624ce4ad123bc11fafad.exe"C:\Users\Admin\AppData\Local\Temp\4bf48438dfaf02c70f065dd4286067d1d3a8f8f8a06a624ce4ad123bc11fafad.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: RenamesItself
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4728 -s 3242⤵
- Program crash
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4728 -ip 47281⤵